Most SaaS companies don't fail a SOC 2 audit because their security is terrible. They fail because they started the audit before they were ready. Answer these 10 questions honestly — they cover the exact controls auditors test first: MFA, access reviews, policies, risk assessment, vendors, monitoring, and evidence. Your readiness score appears the moment you finish.
Email me my results + the full checklist
We'll send your score, your next steps, and the printable 10-step SOC 2 Readiness Checklist.
We use your email only to send your results and one follow-up. No spam. See our Privacy Policy.
Results on the way
Your score and next steps are in your inbox. Want the full detail now? Read the complete SOC 2 Readiness Checklist.
Something went wrong. Please try again, or email us directly at s@onpointe.us.
This quiz is a self-assessment based on the controls auditors test — it is not an audit. A readiness assessment is the formal version.
How the score works
Each question is worth 0, 1, or 2 points — 2 for the practice auditors expect to see operating, 1 for a partial or informal version, 0 for missing. Your total out of 20 places you in one of three bands:
- 0–7 — Not started yet. The foundations aren't in place. That's normal — most first-time companies start here.
- 8–14 — Getting started. Some controls are operating, but the gaps are the ones auditors flag first.
- 15–20 — Nearly ready. The program is mostly there. The next step is an independent dry run before you engage an auditor.
For the full picture behind every question — the 10 readiness phases, the 7 questions that tell you if you're actually ready, and the failure points to eliminate first — see the complete SOC 2 Readiness Checklist.